<!doctype html>
<html lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta name="viewport" content="width=device-width, initial-scale=1" />

<link href='https://fonts.googleapis.com/css?family=Roboto:400,100,300,500,700,900&display=swap' rel='stylesheet preload' type='text/css' as="style">

<link href="https://www.bleepstatic.com/js/redesign/bootstrap/css/bootstrap.min.css" rel="stylesheet preload" type="text/css" media="all" as="style">
<link href="https://www.bleepstatic.com/css/redesign/main.css?v=03.08.23.1" rel="stylesheet preload" type="text/css" media="all" as="style">
<link href="https://www.bleepstatic.com/css/redesign/home.css" rel="stylesheet preload" type="text/css" media="screen" as="style"><link href="https://www.bleepstatic.com/css/redesign/news.css" rel="stylesheet preload" type="text/css" as="style" media="screen,print">
<link rel="preload" href="https://www.bleepstatic.com/js/redesign/jquery-3.5.1.min.js" as="script">
<link rel="preload" href="https://www.bleepstatic.com/js/redesign/jquery-migrate-1.4.1.min.js" as="script">

<meta name="Owner" content="Lawrence Abrams/BleepingComputer.com" />
<link rel="shortcut icon" href="https://www.bleepstatic.com/favicon/bleeping.ico" />
<meta property="og:site_name" content="BleepingComputer" />
<meta property="og:locale" content="en_us" />
<meta name="application-name" content="BleepingComputer" />
<link rel='dns-prefetch' href='//fonts.googleapis.com' />
<link rel='dns-prefetch' href='//www.bleepstatic.com' />
<link rel='dns-prefetch' href='//www.google-analytics.com' />
<link rel='dns-prefetch' href='//www.googletagmanager.com' />
<link rel='dns-prefetch' href='//securepubads.g.doubleclick.net' />
<title>LockBit ransomware encryptors found targeting Mac devices</title>
<meta name="Keywords" content="computers, windows, linux, mac, support, tech support, spyware, malware, virus, security, Apple, Apple M1, Encryptor, LockBit, macOS, PowerPC, Ransomware,virus removal, malware removal, computer help, technical support" />
<meta name="description" content="The LockBit ransomware gang has created encryptors targeting Macs for the first time, likely becoming the first major ransomware operation to ever specifically target macOS." />
<meta name="abstract" content="The LockBit ransomware gang has created encryptors targeting Macs for the first time, likely becoming the first major ransomware operation to ever specifically target macOS." />
<link rel="canonical" href="https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/" />
<link rel="prev" href="https://www.bleepingcomputer.com/news/security/cisa-warns-of-android-bug-exploited-by-chinese-app-to-spy-on-users/" />
<link rel="next" href="https://www.bleepingcomputer.com/offer/deals/keep-your-phone-charged-and-ready-with-this-smartphone-multitool-on-sale-now/" />
<meta name="news_keywords" content="Apple, Apple M1, Encryptor, LockBit, macOS, PowerPC, Ransomware, Security, InfoSec, Computer Security">
<meta property="og:url" content="https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/" />
<meta property="og:type" content="article" />
<meta property="og:title" content="LockBit ransomware encryptors found targeting Mac devices" />
<meta property="og:description" content="The LockBit ransomware gang has created encryptors targeting Macs for the first time, likely becoming the first major ransomware operation to ever specifically target macOS." />
<meta property="og:image" content="https://www.bleepstatic.com/content/hl-images/2023/04/16/apple-logo-padlock-2.jpg" />
<meta property="og:image:secure_url" content="https://www.bleepstatic.com/content/hl-images/2023/04/16/apple-logo-padlock-2.jpg" />
<meta property="fb:app_id" content="517620508265293" />
<meta property="og:image:width" content="1600" />
<meta property="og:image:height" content="900" />
<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:site" content="@BleepinComputer" />
<meta name="twitter:creator" content="@BleepinComputer" />
<meta name="twitter:title" content="LockBit ransomware encryptors found targeting Mac devices" />
<meta name="twitter:description" content="The LockBit ransomware gang has created encryptors targeting Macs for the first time, likely becoming the first major ransomware operation to ever specifically target macOS." />
<meta name="twitter:image" content="https://www.bleepstatic.com/content/hl-images/2023/04/16/apple-logo-padlock-2.jpg" />
<script type="application/ld+json">
{
    "@context": "https://schema.org",
    "@type": "NewsArticle",
    "url": "https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/",
    "headline": "LockBit ransomware encryptors found targeting Mac devices",
    "name": "LockBit ransomware encryptors found targeting Mac devices",
    "mainEntityOfPage": {
        "@type": "WebPage",
        "id": "https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/"
    },
    "description": "The LockBit ransomware gang has created encryptors targeting Macs for the first time, likely becoming the first major ransomware operation to ever specifically target macOS.",
    "image": {
        "@type": "ImageObject",
        "url": "https://www.bleepstatic.com/content/hl-images/2023/04/16/apple-logo-padlock-2.jpg",
        "width": 1600,
        "height": 900
    },
    "author": {
        "@type": "Person",
        "name": "Lawrence Abrams",
        "url": "https://www.bleepingcomputer.com/author/lawrence-abrams/"
    },
    "keywords": ["Apple","Apple M1","Encryptor","LockBit","macOS","PowerPC","Ransomware","Security","InfoSec, Computer Security"],
    "datePublished": "2023-04-16T13:31:54-04:00",
    "dateModified": "2023-04-17T01:55:45-04:00",
    "publisher": {
        "@type": "Organization",
        "name": "BleepingComputer",
        "url": "https://www.bleepingcomputer.com/",
        "logo": {
            "@type": "ImageObject",
            "url": "https://www.bleepstatic.com/logos/bleepingcomputer-logo.png",
            "width": 700,
            "height": 700
        }
    }
}
</script>
<link rel="amphtml" href="https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/amp/">
<LINK REL="alternate" TITLE="Bleeping Computer's News" HREF="https://www.bleepingcomputer.com/feed/" TYPE="application/rss+xml">
<script type="text/javascript" src="https://www.bleepstatic.com/js/redesign/jquery-3.5.1.min.js"></script>
<script type="text/javascript" src="https://www.bleepstatic.com/js/redesign/jquery-migrate-1.4.1.min.js"></script>
<script async type="text/javascript" src="https://www.bleepstatic.com/js/redesign/news.js"></script>
<script>
!function(n){if(!window.cnxps){window.cnxps={},window.cnxps.cmd=[];var t=n.createElement('iframe');t.display='none',t.onload=function(){var n=t.contentWindow.document,c=n.createElement('script');c.src='//cd.connatix.com/connatix.playspace.js',c.setAttribute('async','1'),c.setAttribute('type','text/javascript'),n.body.appendChild(c)},n.head.appendChild(t)}}(document);
</script>
<script id="6302b4e26cf04d8bbf9ab6cbec18daf4">
cnxps.cmd.push(function () {
cnxps({
playerId: '067e5169-ece3-4ce8-87ad-c7961b8bb396'
}).render('6302b4e26cf04d8bbf9ab6cbec18daf4');
});
</script>
<meta name="robots" content="max-image-preview:large">
<link rel="stylesheet" href="https://a.pub.network/core/pubfig/cls.css">
<script data-cfasync="false" type="text/javascript">
  var freestar = freestar || {};
  freestar.queue = freestar.queue || [];
  freestar.config = freestar.config || {};
  // Tag IDs set here, must match Tags served in the Body for proper setup
  freestar.config.enabled_slots = [];
	freestar.queue.push(function() {
	  
	  googletag.pubads().setTargeting('section', ['news','security']);
	});

  freestar.initCallback = function () { (freestar.config.enabled_slots.length === 0) ? freestar.initCallbackCalled = false : freestar.newAdSlots(freestar.config.enabled_slots) }
</script>
<script src="https://a.pub.network/bleepingcomputer-com/pubfig.min.js" async></script>

<script data-cfasync='false' type='text/javascript'>
    ;(function(o) {
        var w=window.top,a='apdAdmin',ft=w.document.getElementsByTagName('head')[0],
        l=w.location.href,d=w.document;w.apd_options=o;
        if(l.indexOf('disable_fi')!=-1) { console.error("disable_fi has been detected in URL. FI functionality is disabled for this page view."); return; }
        var fiab=d.createElement('script'); fiab.type = 'text/javascript';
        fiab.src=o.scheme+'ecdn.analysis.fi/static/js/fab.js';fiab.id='fi-'+o.websiteId;
        ft.appendChild(fiab, ft);if(l.indexOf(a)!=-1) w.localStorage[a]=1; var aM = w.localStorage[a]==1, fi=d.createElement('script'); 
        fi.type='text/javascript'; fi.async=true; if(aM) fi['data-cfasync']='false';
        fi.src=o.scheme+(aM?'cdn':'ecdn') + '.firstimpression.io/' + (aM ? 'fi.js?id='+o.websiteId : 'fi_client.js');
        ft.appendChild(fi);
    })({ 
        'websiteId': 5971, 
        'scheme':    '//'
    });
</script>

<script src="//www.bleepstatic.com/js/qc-consent/qc-consent.js" async=true></script>

<script async src="https://www.googletagmanager.com/gtag/js?id=UA-91740-1"></script>
<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());

  gtag('config', 'UA-91740-1');
</script>

</head>
<body>
<div class="bc_wrapper">

<header>
<div class="container">
<div class="row">
<div class="col-md-4">
<a class="bc_logo" aria-label="BleepingComputer.com" href="https://www.bleepingcomputer.com/"><img src="https://www.bleepstatic.com/images/site/logo.png" width="287" height="24" alt="BleepingComputer.com logo"></a>
</div>
<div class="col-md-8">
<ul class="bc_social_icons">
<li><a href="https://www.facebook.com/BleepingComputer" aria-label="Visit BleepingComputer's Facebook profile"><span title="BleepingComputer Facebook page" class="fa-brands fa-facebook-f"></span></a></li>
<li><a href="https://twitter.com/BleepinComputer" aria-label="Visit BleepingComputer's Twitter profile"><span aria-hidden="true" title="BleepingComputer Twitter page" class="fa-brands fa-twitter"></span></a></li>
<li><a href="https://infosec.exchange/@BleepingComputer" aria-label="Visit BleepingComputer's Mastodon profile"><span aria-hidden="true" title="BleepingComputer Mastodon profile" class="fa-brands fa-mastodon"></span></a></li>
<li><a href="https://www.youtube.com/user/BleepingComputer" aria-label="Visit BleepingComputer's YouTube channel"><span aria-hidden="true" title="BleepingComputer YouTube page" class="fa-brands fa-youtube"></span></a></li>
</ul>
<div class="bc_search_box">
<form title="Search site" action="https://www.bleepingcomputer.com/search/">
<input type="hidden" name="cx" value="partner-pub-0920899300397823:3529943228" />
<input type="hidden" name="cof" value="FORID:10" />
<input type="hidden" name="ie" value="UTF-8" />
<input type="search" name="q" aria-label="Search Site" placeholder="Search Site" />
</form>
<script async type="text/javascript" src="https://www.google.com/coop/cse/brand?form=cse-search-box&amp;lang=en"></script>
</div>
<div class="bc_login">
<input aria-label="Login to BleepingComputer" type="submit" value="Login" class="bc_login_btn">
<input aria-label="Register account" type="submit" value="Sign up" class="bc_signup_btn" onclick="window.location='https://www.bleepingcomputer.com/forums/index.php?app=core&module=global&section=register';" />
</div>
</div>
</div>
</div>

<nav class="bc_navigation">
<div class="container">
<span id="toggle-nav" class="toggle-site-nav">
<span></span>
</span>
<div class="site-nav" id="nav" role="navigation">
<ul class="bc_social_icons bc_mob">
<li><a href="https://www.facebook.com/BleepingComputer" aria-label="Visit BleepingComputer's Facebook profile"><span aria-hidden="true" class="fa-brands fa-facebook-f"></span></a></li>
<li><a href="https://twitter.com/BleepinComputer" aria-label="Visit BleepingComputer's Twitter profile"><span aria-hidden="true" class="fa-brands fa-twitter"></span></a></li>
<li><a href="https://infosec.exchange/@BleepingComputer" aria-label="Visit BleepingComputer's Mastodon profile"><span aria-hidden="true" title="BleepingComputer Mastodon profile" class="fa-brands fa-mastodon"></span></a></li>
<li><a href="https://www.youtube.com/user/BleepingComputer" aria-label="Visit BleepingComputer's YouTube profile"><span aria-hidden="true" class="fa-brands fa-youtube"></span></a></li>
</ul>
<div class="bc_search_box bc_mob">
<form action="https://www.bleepingcomputer.com/search/">
<input type="hidden" name="cx" value="partner-pub-0920899300397823:3529943228" />
<input type="hidden" name="cof" value="FORID:10" />
<input type="hidden" name="ie" value="UTF-8" />
<input type="search" name="q" aria-label="Search Site" placeholder="Search Site" />
</form>
<script async type="text/javascript" src="https://www.google.com/coop/cse/brand?form=cse-search-box&amp;lang=en"></script>
</div>
<div class="bc_login bc_mob">
<input aria-label="Login to BleepingComputer" type="submit" value="Login" class="bc_login_btn">
<input aria-label="Register account" type="submit" value="Sign up" class="bc_signup_btn" onclick="window.location='https://www.bleepingcomputer.com/forums/index.php?app=core&module=global&section=register';">
</div>
<ul class="nav-menu">
<li class="bc_dropdown"><a href="https://www.bleepingcomputer.com/">News</a>
<div class="bc_sub_menu">
<div role="tabpanel">
<ul class="nav nav-tabs" role="tablist" id="bc_drop_tab">
<li class="active"><a href="#nfeatured" role="tab" data-toggle="tab">Featured</a></li>
<li><a href="#nlatest" role="tab" data-toggle="tab">Latest</a></li>
</ul>
<div class="tab-content">
<div role="tabpanel" class="tab-pane active" id="nfeatured">
<ul>
<li>
<a href="https://www.bleepingcomputer.com/news/security/fortra-shares-findings-on-goanywhere-mft-zero-day-attacks/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2023/02/03/thumb/211x130_Fortra_GoAnywhere_MFT.jpg" alt="Fortra shares findings on GoAnywhere MFT zero-day attacks" height="130px" width="100%">
<p>Fortra shares findings on GoAnywhere MFT zero-day attacks</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/news/security/march-2023-broke-ransomware-attack-records-with-459-incidents/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2022/08/12/thumb/211x130_open-lock-cybersecurity.jpg" alt="March 2023 broke ransomware attack records with 459 incidents" height="130px" width="100%">
<p>March 2023 broke ransomware attack records with 459 incidents</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/news/security/ransomware-gangs-abuse-process-explorer-driver-to-kill-security-software/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2022/07/07/thumb/211x130_man-in-hood-typing.jpg" alt="Ransomware gangs abuse Process Explorer driver to kill security software" height="130px" width="100%">
<p>Ransomware gangs abuse Process Explorer driver to kill security software</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/news/security/microsoft-sql-servers-hacked-to-deploy-trigona-ransomware/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2022/11/29/thumb/211x130_trigona-header.jpg" alt="Microsoft SQL servers hacked to deploy Trigona ransomware" height="130px" width="100%">
<p>Microsoft SQL servers hacked to deploy Trigona ransomware</p>
</a>
</li>
</ul>
</div>
<div role="tabpanel" class="tab-pane" id="nlatest">
<ul>
<li>
<a href="https://www.bleepingcomputer.com/news/security/github-now-allows-enabling-private-vulnerability-reporting-at-scale/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2022/04/19/thumb/211x130_GitHub.jpg" alt="GitHub now allows enabling private vulnerability reporting at scale" height="130px" width="100%">
<p>GitHub now allows enabling private vulnerability reporting at scale</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/news/security/evilextractor-malware-activity-spikes-in-europe-and-the-us/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2021/12/30/thumb/211x130_evil-creepy-red-thing.jpg" alt="EvilExtractor malware activity spikes in Europe and the U.S." height="130px" width="100%">
<p>EvilExtractor malware activity spikes in Europe and the U.S.</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/news/security/google-ads-push-bumblebee-malware-used-by-ransomware-gangs/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2022/04/28/thumb/211x130_Bee_headpic.jpg" alt="Google ads push BumbleBee malware used by ransomware gangs" height="130px" width="100%">
<p>Google ads push BumbleBee malware used by ransomware gangs</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/offer/deals/advance-your-it-career-with-this-training-course-bundle-deal/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/content/hl-images/2021/01/26/thumb/211x130_comptia-header.jpg" alt="Advance your IT career with this training course bundle deal" height="130px" width="100%">
<p>Advance your IT career with this training course bundle deal</p>
</a>
</li>
</ul>
</div>
</div>
</div>
</div>
</li>
<li class="bc_dropdown"><a href="https://www.bleepingcomputer.com/download/">Downloads</a>
<div class="bc_sub_menu">
<div role="tabpanel">
<ul class="nav nav-tabs" role="tablist" id="bc_drop_tab">
<li class="active"><a href="#dlatest" role="tab" data-toggle="tab">Latest</a></li>
<li><a href="#most" role="tab" data-toggle="tab">Most Downloaded</a></li>
</ul>
<div class="tab-content">
<div role="tabpanel" class="tab-pane active" id="dlatest">
<ul>
<li>
<a href="https://www.bleepingcomputer.com/download/qualys-browsercheck/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/2/201-qualys-browsercheck-for-windows.jpg" alt="Qualys BrowserCheck" height="130px" width="100%">
<p class="center">Qualys BrowserCheck</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/download/stopdecrypter/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/2/200-stopdecrypter.jpg" alt="STOPDecrypter" height="130px" width="100%">
<p class="center">STOPDecrypter</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/download/auroradecrypter/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/1/199-auroradecrypter.jpg" alt="AuroraDecrypter" height="130px" width="100%">
<p class="center">AuroraDecrypter</p>
</a>
</li>
<li>
<a href="https://www.bleepingcomputer.com/download/fileslockerdecrypter/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/1/198-fileslockerdecryptor.jpg" alt="FilesLockerDecrypter" height="130px" width="100%">
<p class="center">FilesLockerDecrypter</p>
</a>
</li>
</ul>
</div>
<div role="tabpanel" class="tab-pane" id="most">
<ul>
<li>
<a href="/download/adwcleaner/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/0/96-adwcleaner.jpg" alt="AdwCleaner" height="130px" width="100%">
<p class="center">AdwCleaner</p>
</a>
</li>
<li>
<a href="/download/combofix/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/0/9-combofix.jpg" alt="ComboFix" height="130px" width="100%">
<p class="center">ComboFix</p>
</a>
</li>
<li>
<a href="/download/rkill/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/0/8-rkill.jpg" alt="RKill" height="130px" width="100%">
<p class="center">RKill</p>
</a>
</li>
<li>
<a href="/download/junkware-removal-tool/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/download/nav-header-images/0/98-junkware-removal-tool.jpg" alt="Junkware Removal Tool" height="130px" width="100%">
<p class="center">Junkware Removal Tool</p>
</a>
</li>
</ul>
</div>
</div>
</div>
</div>
</li>
<li class="bc_dropdown"><a href="https://www.bleepingcomputer.com/virus-removal/">Virus Removal Guides</a>
<div class="bc_sub_menu">
<div role="tabpanel">
<ul class="nav nav-tabs" role="tablist" id="bc_drop_tab">
<li class="active"><a href="#vlatest" role="tab" data-toggle="tab">Latest</a></li>
<li><a href="#vmost" role="tab" data-toggle="tab">Most Viewed</a></li>
<li><a href="#ransomware" role="tab" data-toggle="tab">Ransomware</a></li>
</ul>
<div class="tab-content">
<div role="tabpanel" class="tab-pane active" id="vlatest">
 <ul>
<li>
<a href="/virus-removal/remove-theonlinesearch.com-search-redirect" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/removal-guides/t/Theonlinesearch.com/theonlinesearch.com-search-redirect-thmb-350.jpg" alt="Remove the Theonlinesearch.com Search Redirect" height="130px" width="100%">
<p>Remove the Theonlinesearch.com Search Redirect</p>
</a>
</li>
<li>
<a href="/virus-removal/remove-smartwebfinder.com-search-redirect" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/removal-guides/s/smartwebfinder-redirect/smartwebfinder-redirect-thmb-350.jpg" alt="Remove the Smartwebfinder.com Search Redirect" height="130px" width="100%">
<p>Remove the Smartwebfinder.com Search Redirect</p>
</a>
</li>
<li>
<a href="/virus-removal/how-to-remove-the-pblock-adware-extension" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/removal-guides/p/pblock/pblock-extension-thmb-350.jpg" alt="How to remove the PBlock+ adware browser extension" height="130px" width="100%">
<p>How to remove the PBlock+ adware browser extension</p>
</a>
</li>
<li>
<a href="/virus-removal/remove-toksearches.xyz-search-redirect" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/removal-guides/t/toksearches/toksearches-redirect-thmb-350.jpg" alt="Remove the Toksearches.xyz Search Redirect" height="130px" width="100%">
<p>Remove the Toksearches.xyz Search Redirect</p>
</a>
</li>
</ul>
</div>
<div role="tabpanel" class="tab-pane" id="vmost">
<ul>
<li>
<a href="/virus-removal/remove-security-tool" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/swr-guides/s/securitytool/security-tool-thmb-350.jpg" alt="Remove Security Tool and SecurityTool (Uninstall Guide)" height="130px" width="100%">
<p>Remove Security Tool and SecurityTool (Uninstall Guide)</p>
</a>
</li>
<li>
<a href="/virus-removal/remove-vundo-virtumonde" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/navigation/generic-chalkboard-211x130.jpg" alt="How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo" height="130px" width="100%">
<p>How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo</p>
</a>
 </li>
<li>
<a href="/virus-removal/uninstall-antivirus-2009" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/swr-guides/a/antivirus-2009/antivirus-2009-thmb-350.jpg" alt="How to remove Antivirus 2009 (Uninstall Instructions)" height="130px" width="100%">
<p>How to remove Antivirus 2009 (Uninstall Instructions)</p>
</a>
</li>
<li>
<a href="/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/swr-guides/tools/tdsskiller/tdsskiller-start-thmb-350.jpg" alt="How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller" height="130px" width="100%">
<p>How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller</p>
</a>
</li>
</ul>
</div>
<div role="tabpanel" class="tab-pane" id="ransomware">
<ul>
<li>
<a href="/virus-removal/locky-ransomware-information-help" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/swr-guides/l/locky/locky-header-thmb-350.png" alt="Locky Ransomware Information, Help Guide, and FAQ" height="130px" width="100%">
<p>Locky Ransomware Information, Help Guide, and FAQ</p>
</a>
</li>
<li>
<a href="/virus-removal/cryptolocker-ransomware-information" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/swr-guides/c/cryptolocker/CryptoLocker-thmb-350.jpg" alt="CryptoLocker Ransomware Information Guide and FAQ" height="130px" width="100%">
<p>CryptoLocker Ransomware Information Guide and FAQ</p>
</a>
</li>
<li>
<a href="/virus-removal/cryptorbit-ransomware-information" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/swr-guides/c/cryptorbit/howdecrypt-thmb-350.gif" alt="CryptorBit and HowDecrypt Information Guide and FAQ" height="130px" width="100%">
<p>CryptorBit and HowDecrypt Information Guide and FAQ</p>
</a>
</li>
<li>
<a href="/virus-removal/cryptodefense-ransomware-information" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/swr-guides/c/CryptoDefense/how_decrypt-html-thmb-350.jpg" alt="CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ" height="130px" width="100%">
<p>CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ</p>
</a>
</li>
</ul>
</div>
</div>
</div>
</div>
</li>
<li class="bc_dropdown"><a href="https://www.bleepingcomputer.com/tutorials/">Tutorials</a>
<div class="bc_sub_menu">
<div role="tabpanel">
<ul class="nav nav-tabs" role="tablist" id="bc_drop_tab">
<li class="active"><a href="#tlatest" role="tab" data-toggle="tab">Latest</a></li>
<li><a href="#popular" role="tab" data-toggle="tab">Popular</a></li>
</ul>
<div class="tab-content">
<div role="tabpanel" class="tab-pane active" id="tlatest">
<ul>
<li>
<a href="/tutorials/how-to-open-a-windows-11-command-prompt-as-administrator/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/7/370-windows-11-admin-prompt-header.jpg" alt="How to open a Windows 11 Command Prompt as Administrator" height="130px" width="100%">
<p>How to open a Windows 11 Command Prompt as Administrator</p>
</a>
</li>
<li>
<a href="/tutorials/how-to-make-the-start-menu-full-screen-in-windows-10/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/7/369-start-full-screen.jpg" alt="How to make the Start menu full screen in Windows 10" height="130px" width="100%">
<p>How to make the Start menu full screen in Windows 10</p>
</a>
</li>
<li>
<a href="/tutorials/how-to-install-the-microsoft-visual-c-2015-runtime/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/7/368-header-runtime.jpg" alt="How to install the Microsoft Visual C++ 2015 Runtime" height="130px" width="100%">
<p>How to install the Microsoft Visual C++ 2015 Runtime</p>
</a>
</li>
<li>
<a href="/tutorials/how-to-open-an-elevated-powershell-admin-prompt-in-windows-10/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/7/367-PowerShell.jpg" alt="How to open an elevated PowerShell Admin prompt in Windows 10" height="130px" width="100%">
<p>How to open an elevated PowerShell Admin prompt in Windows 10</p>
</a>
</li>
</ul>
</div>
<div role="tabpanel" class="tab-pane" id="popular">
<ul>
 <li>
<a href="/tutorials/how-to-start-windows-in-safe-mode/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/1/61-startup-settings.png" alt="How to start Windows in Safe Mode" height="130px" width="100%">
<p>How to start Windows in Safe Mode</p>
</a>
</li>
<li>
<a href="/tutorials/how-to-remove-a-trojan-virus-worm-or-malware/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/2/101-Cerber-wallpaper.png" alt="How to remove a Trojan, Virus, Worm, or other Malware" height="130px" width="100%">
<p>How to remove a Trojan, Virus, Worm, or other Malware</p>
</a>
</li>
<li>
<a href="/tutorials/show-hidden-files-in-windows-7/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/3/151-show-hidden-files.jpg" alt="How to show hidden files in Windows 7" height="130px" width="100%">
<p>How to show hidden files in Windows 7</p>
</a>
</li>
<li>
<a href="/tutorials/how-to-see-hidden-files-in-windows/" class="nmic">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/site/tutorials/nav-header-images/1/62-hidden-files.jpg" alt="How to see hidden files in Windows" height="130px" width="100%">
<p>How to see hidden files in Windows</p>
</a>
</li>
</ul>
</div>
</div>
</div>
</div>
</li>
<li class="bc_dropdown"><a href="https://deals.bleepingcomputer.com/">Deals</a>
<div class="bc_sub_menu">
<div role="tabpanel">
<ul class="nav nav-tabs" role="tablist" id="bc_drop_tab">
<li class="active"><a href="#dcategories" role="tab" data-toggle="tab">Categories</a></li>
</ul>
<div class="tab-content">
<div role="tabpanel" class="tab-pane active" id="dcategories">
<ul>
<li>
<a href="https://deals.bleepingcomputer.com/deals/elearning?utm_source=bleepingcomputer.com&utm_medium=dd_cat">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/deals/elearning-nav.jpg" alt="eLearning" height="130px" width="100%">
<p align='center'>eLearning</p>
</a>
</li>
<li>
<a href="https://deals.bleepingcomputer.com/deals/certifications?utm_source=bleepingcomputer.com&utm_medium=dd_cat">
<img src="" class="b-lazy" data-src="https://www.bleepstatic.com/images/deals/it-certification-nav.jpg" alt="IT Certification Courses" height="130px" width="100%">
<p align='center'>IT Certification Courses</p>
</a>
</li>
<li>
<a href="https://deals.bleepingcomputer.com/deals/gear-gadgets?utm_source=bleepingcomputer.com&utm_medium=dd_cat">
<img src="" data-src="https://www.bleepstatic.com/images/deals/gear-gadgets-nav.jpg" class="b-lazy" alt="Gear &amp; Gadgets" height="130px" width="100%">
<p align='center'>Gear + Gadgets</p>
</a>
</li>
<li>
<a href="https://deals.bleepingcomputer.com/collections/tag-cyber-security?utm_source=bleepingcomputer.com&utm_medium=dd_cat">
<img src="" data-src="https://www.bleepstatic.com/images/deals/security-nav.jpg" class="b-lazy" alt="Security" height="130px" width="100%">
<p align='center'>Security</p>
</a>
</li>
</ul>
</div>
</div>
</div>
</div>
</li>
<li><a href="https://www.bleepingcomputer.com/forums/">Forums</a></li>
<li class="bc_dropdown bc_more_nav"><a aria-label="Click here to see more BleepingComputer sections" id="more_dd" href="#">More</a>
<ul id="bc_more-nav" class="bc_more_submenu">
<li><a href="https://www.bleepingcomputer.com/startups/">Startup Database</a></li>
<li><a href="https://www.bleepingcomputer.com/uninstall/">Uninstall Database</a></li>
<li><a href="https://www.bleepingcomputer.com/glossary/">Glossary</a></li>
<li><a href="https://www.bleepingcomputer.com/forums/t/730914/the-bleepingcomputer-official-discord-chat-server-come-join-the-fun/">Chat on Discord</a></li>
<li><a href="https://www.bleepingcomputer.com/news-tip/">Send us a Tip!</a></li>
<li><a href="https://www.bleepingcomputer.com/welcome-guide/">Welcome Guide</a></li>
</ul>
</li>
</ul>
</div>
</div>
</nav>
</header>

<section class="cz-oa-wrapp">
<div class="container">
<div class="row">
<div class="col-md-12">
<div class="cz-toa-wrapp">
<div align="center" data-freestar-ad="__320x50 __970x250" id="bleepingcomputer_728x90_970x90_970x250_320x50_ATF">
<script data-cfasync="false" type="text/javascript">
    freestar.config.enabled_slots.push({ placementName: "bleepingcomputer_728x90_970x90_970x250_320x50_ATF", slotId: "bleepingcomputer_728x90_970x90_970x250_320x50_ATF" });
</script>
</div>
</div>
</div>
</div>
</div>
</section>
<section>
<div class="container">
<div class="row">
<div class="col-md-12">
<div class="cz-breadcrumb-outer-wrapp">
<div class="cz-breadcrumb-left-area">
<div class="cz-breadcrumb">
<ul itemscope itemtype="https://schema.org/BreadcrumbList">
<li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"><a href="https://www.bleepingcomputer.com/" itemprop="item"><span itemprop="name">Home</span></a><meta itemprop="position" content="1" /></li><li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"><span itemprop="name"><a href="https://www.bleepingcomputer.com/news/" itemprop="item">News</a></span><meta itemprop="position" content="2" /></li><li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"><span itemprop="name"><a href="https://www.bleepingcomputer.com/news/security/" itemprop="item">Security</a></span><meta itemprop="position" content="3" /></li><li class="active" itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"><span itemprop="name">LockBit ransomware encryptors found targeting Mac devices</span><meta itemprop="position" content="4" /></li>
</ul>
</div>
</div>
<div class="cz-breadcrumb-right-area">
<div class="cz-like-wrapper">
<ul>
<li><div class="addthis_sharing_toolbox"></div></li>
<li class="cz-print-icon"><a aria-label="Print article" href="#">&nbsp;</a></li>
</ul>
</div>
</div>
</div>
</div>
</div>
</div>
</section>

<section class="bc_main_content">
<div class="container">
<div class="row">
<div class="col-md-8">
<div class="cz-main-left-section">
<article><div class="article_section">
<h1>LockBit ransomware encryptors found targeting Mac devices</h1>
<div class="cz-news-story-title-section">
<div class="cz-news-title-left-area">
By <h6><a rel="author" href="https://www.bleepingcomputer.com/author/lawrence-abrams/" class="author"><span itemprop="author" itemscope itemtype="https://schema.org/Person"><span itemprop="name">Lawrence Abrams</span></span></a></h6>
</div>
<meta itemprop="articleSection" content="Security"><meta itemprop="articleSection" content="Apple"><div class="cz-news-title-right-area">
<ul><li class="cz-news-date">April 16, 2023</li>
<li class="cz-news-time">01:31 PM</li>
<li class="cz-news-comment"><a href="#comments">7</a></li>
</ul></div>
</div>
<div class="articleBody">
<div style="text-align:center">
<figure class="image" style="display:inline-block"><img alt="Apple logo with a padlock" height="900" src="https://www.bleepstatic.com/content/hl-images/2023/04/16/apple-logo-padlock-2.jpg" width="1600"><figcaption style="text-align:left;"><em>Image: <a href="https://www.norebbo.com/apple-logo/" target="_blank" rel="nofollow noopener">Norebbo</a></em></figcaption></figure></div>
<p>The LockBit ransomware gang has created encryptors targeting Macs for the first time, likely becoming the first major ransomware operation to ever specifically target macOS.</p>
<p>The new ransomware encryptors were discovered by cybersecurity researcher&nbsp;<a href="https://twitter.com/malwrhunterteam/status/1647384505550876675" target="_blank" rel="nofollow noopener">MalwareHunterTeam</a>&nbsp;who found a ZIP archive on VirusTotal that contained what appears to be most of the available LockBit encryptors.</p>
<p>Historically, the LockBit operation uses encryptors designed for attacks on Windows, Linux, and VMware ESXi servers. However, as shown below, this archive [<a href="https://www.virustotal.com/gui/file/bf3ebc294870a6e743f021f4e18be75810149a1004b8d7c8a1e91f35562db3f5" target="_blank" rel="nofollow noopener">VirusTotal</a>] also contained previously unknown encryptors for macOS, ARM, FreeBSD, MIPS, and SPARC CPUs.</p>
<div style="text-align:center">
<figure class="image" style="display:inline-block"><img alt="Archive of available LockBit encryptors" height="573" src="https://www.bleepstatic.com/images/news/ransomware/l/lockbit/macos-encryptor/encryptor-list.jpg" width="900"><figcaption><strong>Archive of available LockBit encryptors</strong><br><em>Source: BleepingComputer</em></figcaption></figure></div>
<p>These encryptors also include one named 'locker_Apple_M1_64' [<a href="https://www.virustotal.com/gui/file/3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79" target="_blank" rel="nofollow noopener">VirusTotal</a>] that targets the newer Macs running on Apple Silicon. The archive also contains lockers for PowerPC CPUs, which older Macs use.</p>
<p>Further research by cybersecurity researcher Florian Roth found an Apple M1 encryptor&nbsp;<a href="https://www.virustotal.com/gui/file/0be6f1e927f973df35dad6fc661048236d46879ad59f824233d757ec6e722bde/details" target="_blank" rel="nofollow noopener">uploaded to VirusTotal</a>&nbsp;in December 2022, indicating that these samples have been floating around for some time.</p>
<h2>Likely test builds</h2>
<p>BleepingComputer analyzed the strings in the LockBit encryptor for Apple M1 and found strings that are out of place in a macOS encryptor, indicating that these were likely haphazardly thrown together in a test.</p>
<p>For example, there are numerous references to VMware ESXi, which is out of place in an&nbsp;Apple M1 encryptor,&nbsp;as VMare announced they would <a href="https://kb.vmware.com/s/article/88698" target="_blank" rel="nofollow noopener">not be supporting the CPU architecture</a>.</p>
<pre><code>_check_esxi
esxi_
_Esxi
_kill_esxi_1
_kill_esxi_2
_kill_esxi_3
_kill_processes
_kill_processes_Esxi
_killed_force_vm_id
_listvms
_esxcfg_scsidevs1
_esxcfg_scsidevs2
_esxcfg_scsidevs3
_esxi_disable
_esxi_enable
</code></pre>
<p>Furthermore, the encryptor contains a list of sixty-five file extensions and filenames that will be excluded from encryption, all of them being Windows file extensions and folders.</p>
<p>A small snippet of the Windows files the Apple M1 encryptor will not encrypt is listed below, all out of place on a macOS device.</p>
<pre><code>.exe
.bat
.dll
msstyles
gadget
winmd
ntldr
ntuser.dat.log
bootsect.bak
autorun.inf
thumbs.db
iconcache.db</code></pre>
<p>Almost all of the ESXi and Windows strings are also present in the MIPs and FreeBSD encryptors, indicating that they use a shared codebase.</p>
<p>The good news is that these encryptors are likely not ready for deployment in actual attacks against macOS devices.</p>
<p>Cisco Talos researcher <a href="https://twitter.com/AShukuhi" target="_blank" rel="nofollow noopener">Azim Khodjibaev</a> told BleepingComputer that based on their research, the encryptors were meant as a test and were never intended for deployment in live cyberattacks.</p>
<p>macOS cybersecurity expert&nbsp;<a href="https://twitter.com/patrickwardle" target="_blank" rel="nofollow noopener">Patrick Wardle</a>&nbsp;further confirmed BleepingComputer's and Cisco's theory that these are in-development/test builds, stating that the encryptor is far from complete as it is missing the required functionality to encrypt Macs properly.</p>
<p>Instead, Wardle&nbsp;told BleepingComputer that he believes the macOS encryptor is based on the Linux version and compiled for macOS with some basic configuration settings.</p>
<p>Furthermore, Wardle told us that when the macOS encryptor&nbsp;is launched, it crashes due to a buffer overflow bug in its code.</p>
<p style="text-align:center"><a href="https://twitter.com/patrickwardle/status/1647662008278609923" target="_blank" rel="nofollow noopener"><img alt="Patrick Wardle Tweet" height="500" src="https://www.bleepstatic.com/images/news/ransomware/l/lockbit/macos-encryptor/patrick-tweet.jpg" width="477"></a></p>
<p>"It seems that macOS is now on their radar ... but other than compiling it for macOS, and adding a basic config (which are just basic flags ...not specific to macOS per se) this is far from ready for deployment," Wardle told BleepingComputer.</p>
<p>Wardle further shared that the LockBit developer must first "figure out how to bypass TCC, get notarized" before becoming a functional encryptor.</p>
<p>A detailed technical analysis conducted by Wardle on the new Mac encryptor can be found on <a href="https://objective-see.org/blog/blog_0x75.html" target="_blank" rel="nofollow noopener">Objective See</a>.</p>
<p>While Windows has been the most targeted operating system in ransomware attacks, nothing prevents developers from creating ransomware that targets Macs.</p>
<p>However, as the LockBit operation is known for pushing the envelope in ransomware development, it would not be surprising to see more advanced and optimized encryptors for these CPU architectures released in the future.</p>
<p>Therefore, all computer users, including Mac owners, should practice good online safety habits, including keeping the operating system updated, avoiding opening unknown attachments and executables, generate offline backups, and using strong and unique passwords at every site you visit.</p>
<p><em>Update 4/16/23:&nbsp;</em>In response to questions from BleepingComputer, the public-facing representative of LockBit, known as LockBitSupp, said that the Mac encryptor is "actively being developed."</p>
<p>While LockBit has a history of toying with security researchers and the media, if true, we will likely see more production-quality versions in the future.</p>
<p>Furthermore, while it's not clear how useful a macOS encryptor would be in the enterprise, some LockBit affiliates target consumers and small businesses, where an encryptor like this could be more useful.</p>
<div class="cz-related-article-wrapp">
<h3>Related Articles:</h3>
<p><a href="https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-april-21st-2023-macs-in-the-crosshairs/" class="ras">The Week in Ransomware - April 21st 2023 - Macs in the Crosshairs</a></p><p><a href="https://www.bleepingcomputer.com/news/security/ransomware-gangs-abuse-process-explorer-driver-to-kill-security-software/" class="ras">Ransomware gangs abuse Process Explorer driver to kill security software</a></p><p><a href="https://www.bleepingcomputer.com/news/apple/apple-fixes-recently-disclosed-zero-days-on-older-iphones-and-ipads/" class="ras">Apple fixes recently disclosed zero-days on older iPhones and iPads</a></p><p><a href="https://www.bleepingcomputer.com/news/apple/apple-fixes-two-zero-days-exploited-to-hack-iphones-and-macs/" class="ras">Apple fixes two zero-days exploited to hack iPhones and Macs</a></p><p><a href="https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-march-24th-2023-clop-overload/" class="ras">The Week in Ransomware - March 24th 2023 - Clop overload</a></p>
</div>
</div>
</div>
</article><div class="asa">
<div align="center" data-freestar-ad="__320x50 __728x90" id="bleepingcomputer_728x90_320x50_InContent_1">
<script data-cfasync="false" type="text/javascript">
    freestar.config.enabled_slots.push({ placementName: "bleepingcomputer_728x90_320x50_InContent_1", slotId: "bleepingcomputer_728x90_320x50_InContent_1" });
</script></div>
</div>
<div class="cz-news-tags-wrap">
<ul><li><a href="https://www.bleepingcomputer.com/tag/apple/">Apple</a></li>
<li><a href="https://www.bleepingcomputer.com/tag/apple-m1/">Apple M1</a></li>
<li><a href="https://www.bleepingcomputer.com/tag/encryptor/">Encryptor</a></li>
<li><a href="https://www.bleepingcomputer.com/tag/lockbit/">LockBit</a></li>
<li><a href="https://www.bleepingcomputer.com/tag/macos/">macOS</a></li>
<li><a href="https://www.bleepingcomputer.com/tag/powerpc/">PowerPC</a></li>
<li><a href="https://www.bleepingcomputer.com/tag/ransomware/">Ransomware</a></li>
</ul></div>
<div class="cz-news-like-wrapp">
<div class="addthis_toolbox addthis_default_style addthis_32x32_style">
<div class="cz-news-like-left-area">
<ul><li><a aria-label="Share article on Facebook" class="addthis_button_facebook"></a></li>
<li><a aria-label="Share article on Twitter" class="addthis_button_twitter"></a></li>
<li><a aria-label="Share article on LinkedIn" class="addthis_button_linkedin"></a></li>
</ul></div>
<div class="cz-news-like-right-area">
<ul><li><a title="Email article" class="addthis_button_email"></a></li>
<li class="cz-lg-print-icon"><a aria-label="Print Article" title="Print article" href="#"></a></li>
</ul></div>
</div>
</div>
<div class="cz-full-bio-wrapp">
<div class="cz-full-bio-img-wrapp" title="Lawrence Abrams profile page">
<a style="background-image:url('https://www.bleepstatic.com/author/photos/21beb902b545b086a90ec39f1df36b94.jpg');" aria-label="Photo of Lawrence Abrams" alt-title="Lawrence Abrams profile page" class="author-img" href="https://www.bleepingcomputer.com/author/lawrence-abrams/"></a>
</div>
<div class="cz-full-bio-content-wrapp">
<h5><a href="https://www.bleepingcomputer.com/author/lawrence-abrams/" target="_blank">Lawrence Abrams</a> <span> <a href="mailto:lawrence.abrams@bleepingcomputer.com" aria-label="Email lawrence.abrams@bleepingcomputer.com" alt-title="Email lawrence.abrams@bleepingcomputer.com"><i aria-hidden="true" class="fa fa-envelope email" title="Email lawrence.abrams@bleepingcomputer.com"></i></a> <a href="https://twitter.com/LawrenceAbrams" target="_blank" rel="noopener" aria-label="Open Author's twitter page" alt-title="Open Author's twitter page"><i aria-hidden="true" class="fa-brands fa-twitter twitter" title="Open Author's twitter page"></i></a></span></h5>
Lawrence Abrams is the owner and Editor in Chief of BleepingComputer.com. Lawrence's area of expertise includes Windows, malware removal, and computer forensics. Lawrence Abrams is a co-author of the Winternals Defragmentation, Recovery, and Administration Field Guide and the technical editor for Rootkits for Dummies.
</div>
</div>
<div class="cz-story-navigation">
<ul><li><a href="https://www.bleepingcomputer.com/news/security/cisa-warns-of-android-bug-exploited-by-chinese-app-to-spy-on-users/"><i aria-hidden="true" title="Previous story" class="fa fa-chevron-left"></i> Previous Article </a></li>
<li><a href="https://www.bleepingcomputer.com/offer/deals/keep-your-phone-charged-and-ready-with-this-smartphone-multitool-on-sale-now/">Next Article <i aria-hidden="true" title="Next story" class="fa fa-chevron-right"></i></a></li>
</ul></div>
<div class="cz-newz-comment-wrapp" id="comments">
<h3>Comments</h3>
<ul><li id="cid26805" itemscope itemtype="https://schema.org/UserComments">
<div class="cz-newz-comment-inner-wrappper">
<div class="cz-newz-comment-img-wrappper"> <img alt="Mjaggard Photo" src="" data-src="https://www.bleepingcomputer.com/forums/public/style_images/mobile/profile/default_large.png" class="b-lazy"></div>
<div class="cz-newz-comment-content-wrappper">
<div class="cz-newz-comment-title-wrapp">
<div class="cz-newz-title-left-area">
<data itemprop="name" content="Mjaggard"></data><data itemprop="commentTime" content="2023-04-16T06:31"></data><h6>
<a href="https://www.bleepingcomputer.com/forums/u/1279531/mjaggard/" target="_blank">Mjaggard</a> <span> - 5 days ago</span> </h6></div>
<div class="cz-newz-title-right-area">
<ul><li><a class="cz-news-report cz-comment-report-btn" aria-label="Report comment" href="#" title="Report" data-id="26805">&nbsp;</a></li>
<li><a class="cz-news-link" href="#cid26805" title="Link">&nbsp;</a></li>
</ul></div>
</div>
<p id="comment_html_26805" itemprop="commentText">Clearly a good idea but how are strong and unique passwords going to help against a ransomware attack? A reliable backup is what you need.</p>
</div>
</div>
</li>
<li id="cid26810" itemscope itemtype="https://schema.org/UserComments">
<div class="cz-newz-comment-inner-wrappper  cz-second-comment">
<div class="cz-newz-comment-img-wrappper"> <img alt="Lawrence Abrams Photo" src="" data-src="https://www.bleepstatic.com/author/photos/21beb902b545b086a90ec39f1df36b94.jpg" class="b-lazy"></div>
<div class="cz-newz-comment-content-wrappper">
<div class="cz-newz-comment-title-wrapp">
<div class="cz-newz-title-left-area">
<data itemprop="name" content="Lawrence Abrams"></data><data itemprop="commentTime" content="2023-04-16T07:31"></data><h6>
<a href="https://www.bleepingcomputer.com/author/lawrence-abrams/" target="_blank">Lawrence Abrams</a> <span> - 5 days ago</span> </h6></div>
<div class="cz-newz-title-right-area">
<ul><li><a class="cz-news-report cz-comment-report-btn" aria-label="Report comment" href="#" title="Report" data-id="26810">&nbsp;</a></li>
<li><a class="cz-news-link" href="#cid26810" title="Link">&nbsp;</a></li>
</ul></div>
</div>
<p id="comment_html_26810" itemprop="commentText">Using employees credentials are a common vector used to gain access to corporate networks.<br><br>
Every little bit of good cyber practices helps, including not using weak passwords and different ones for each account.<br><br>
Added offline backup recommendation. Thx.</p>
</div>
</div>
</li>
<li id="cid26834" itemscope itemtype="https://schema.org/UserComments">
<div class="cz-newz-comment-inner-wrappper  cz-second-comment">
<div class="cz-newz-comment-img-wrappper"> <img alt="TimMcP Photo" src="" data-src="https://www.bleepingcomputer.com/forums/uploads/profile/photo-1189475.jpg?_r=1680805296" class="b-lazy"></div>
<div class="cz-newz-comment-content-wrappper">
<div class="cz-newz-comment-title-wrapp">
<div class="cz-newz-title-left-area">
<data itemprop="name" content="TimMcP"></data><data itemprop="commentTime" content="2023-04-19T10:41"></data><h6>
<a href="https://www.bleepingcomputer.com/forums/u/1189475/timmcp/" target="_blank">TimMcP</a> <span> - 3 days ago</span> </h6></div>
<div class="cz-newz-title-right-area">
<ul><li><a class="cz-news-report cz-comment-report-btn" aria-label="Report comment" href="#" title="Report" data-id="26834">&nbsp;</a></li>
<li><a class="cz-news-link" href="#cid26834" title="Link">&nbsp;</a></li>
</ul></div>
</div>
<p id="comment_html_26834" itemprop="commentText">Say you sign up to some web site, and use your corporate email address to register, and also use your corporate password, so you don't have to remember two, if there's no 2FA on your webmail, and those creds get breached, you've given away access to your email. If you picked a unique password for that new site, you haven't. </p>
</div>
</div>
</li>
<li id="cid26813" itemscope itemtype="https://schema.org/UserComments">
<div class="cz-newz-comment-inner-wrappper">
<div class="cz-newz-comment-img-wrappper"> <img alt="BrechtMo Photo" src="" data-src="https://www.bleepingcomputer.com/forums/public/style_images/master/profile/default_large.png" class="b-lazy"></div>
<div class="cz-newz-comment-content-wrappper">
<div class="cz-newz-comment-title-wrapp">
<div class="cz-newz-title-left-area">
<data itemprop="name" content="BrechtMo"></data><data itemprop="commentTime" content="2023-04-17T08:28"></data><h6>
<a href="https://www.bleepingcomputer.com/forums/u/1191437/brechtmo/" target="_blank">BrechtMo</a> <span> - 5 days ago</span> </h6></div>
<div class="cz-newz-title-right-area">
<ul><li><a class="cz-news-report cz-comment-report-btn" aria-label="Report comment" href="#" title="Report" data-id="26813">&nbsp;</a></li>
<li><a class="cz-news-link" href="#cid26813" title="Link">&nbsp;</a></li>
</ul></div>
</div>
<p id="comment_html_26813" itemprop="commentText">"Furthermore, while it's not clear how useful a macOS encryptor would be in the enterprise, some LockBit affiliates target consumers and small businesses, where an encryptor like this could be more useful."<br>
I'm not sure what this means. Do you mean a MacOs installation in an enterprise managed environment would be less vulnerable somehow?</p>
</div>
</div>
</li>
<li id="cid26814" itemscope itemtype="https://schema.org/UserComments">
<div class="cz-newz-comment-inner-wrappper  cz-second-comment">
<div class="cz-newz-comment-img-wrappper"> <img alt="Lawrence Abrams Photo" src="" data-src="https://www.bleepstatic.com/author/photos/21beb902b545b086a90ec39f1df36b94.jpg" class="b-lazy"></div>
<div class="cz-newz-comment-content-wrappper">
<div class="cz-newz-comment-title-wrapp">
<div class="cz-newz-title-left-area">
<data itemprop="name" content="Lawrence Abrams"></data><data itemprop="commentTime" content="2023-04-17T09:59"></data><h6>
<a href="https://www.bleepingcomputer.com/author/lawrence-abrams/" target="_blank">Lawrence Abrams</a> <span> - 5 days ago</span> </h6></div>
<div class="cz-newz-title-right-area">
<ul><li><a class="cz-news-report cz-comment-report-btn" aria-label="Report comment" href="#" title="Report" data-id="26814">&nbsp;</a></li>
<li><a class="cz-news-link" href="#cid26814" title="Link">&nbsp;</a></li>
 </ul></div>
</div>
<p id="comment_html_26814" itemprop="commentText">No, just that macOS is not as widely used in the enterprise compared to Windows servers and workstations.</p>
</div>
</div>
</li>
<li id="cid26835" itemscope itemtype="https://schema.org/UserComments">
<div class="cz-newz-comment-inner-wrappper  cz-second-comment">
<div class="cz-newz-comment-img-wrappper"> <img alt="TimMcP Photo" src="" data-src="https://www.bleepingcomputer.com/forums/uploads/profile/photo-1189475.jpg?_r=1680805296" class="b-lazy"></div>
<div class="cz-newz-comment-content-wrappper">
<div class="cz-newz-comment-title-wrapp">
<div class="cz-newz-title-left-area">
<data itemprop="name" content="TimMcP"></data><data itemprop="commentTime" content="2023-04-19T10:42"></data><h6>
<a href="https://www.bleepingcomputer.com/forums/u/1189475/timmcp/" target="_blank">TimMcP</a> <span> - 3 days ago</span> </h6></div>
<div class="cz-newz-title-right-area">
<ul><li><a class="cz-news-report cz-comment-report-btn" aria-label="Report comment" href="#" title="Report" data-id="26835">&nbsp;</a></li>
<li><a class="cz-news-link" href="#cid26835" title="Link">&nbsp;</a></li>
</ul></div>
</div>
<p id="comment_html_26835" itemprop="commentText">Indeed, we got rid of our last few Macs last year. Out of ~5000 devices we had about 5 Macs, because someone convinced someone they could so something a PC couldn't back in the day.</p>
</div>
</div>
</li>
<li id="cid26826" itemscope itemtype="https://schema.org/UserComments">
<div class="cz-newz-comment-inner-wrappper  cz-second-comment">
<div class="cz-newz-comment-img-wrappper"> <img alt="h_b_s Photo" src="" data-src="https://www.bleepingcomputer.com/forums/public/style_images/master/profile/default_large.png" class="b-lazy"></div>
<div class="cz-newz-comment-content-wrappper">
<div class="cz-newz-comment-title-wrapp">
<div class="cz-newz-title-left-area">
<data itemprop="name" content="h_b_s"></data><data itemprop="commentTime" content="2023-04-18T10:55"></data><h6>
<a href="https://www.bleepingcomputer.com/forums/u/1211617/h-b-s/" target="_blank">h_b_s</a> <span> - 4 days ago</span> </h6></div>
<div class="cz-newz-title-right-area">
<ul><li><a class="cz-news-report cz-comment-report-btn" aria-label="Report comment" href="#" title="Report" data-id="26826">&nbsp;</a></li>
<li><a class="cz-news-link" href="#cid26826" title="Link">&nbsp;</a></li>
</ul></div>
</div>
<p id="comment_html_26826" itemprop="commentText">Macs are more likely to be a personal device around corporate environments, especially with executives and technical support. There is a high(er) percentage of Macs in universities in the US that may be either personal/student owned or university property, however. Universities tend to be very mixed environments. You'll find Microsoft, Apple, IBM in both mainframe and POWER systems, and various Linux systems that may or may not be PCs in nearly any given university. Administration is usually Microsoft with IBM mainframe support depending on the uni.</p>
</div>
</div>
</li>
</ul></div>
<div class="cz-post-comment-wrapp" id="comment_form">
<h5>Post a Comment <span><a href="https://www.bleepingcomputer.com/posting-guidelines/" target="_blank">Community Rules</a></span></h5>
<div class="cz-comment-loggin-wrapp">
<h6>You need to login in order to post a comment</h6>
<input type="submit" value="Login" class="bc_login_btn cz-green-bttn"><p>Not a member yet? <a href="https://www.bleepingcomputer.com/forums/index.php?app=core&amp;module=global&amp;section=register">Register Now</a></p>
</div>
</div>
<div class="cz-related-article-wrapp">
<h3>You may also like:</h3>
<script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script><ins class="adsbygoogle" style="display:block" data-ad-format="autorelaxed" data-ad-client="ca-pub-0920899300397823" data-ad-slot="4359266829"></ins>
<script>
     (adsbygoogle = window.adsbygoogle || []).push({});
</script></div>
</div>
</div>

<div class="col-md-4 bc_right_sidebar">
<div class="s-ou-wrap">
<div align="center">
<a href="https://www.bleepingcomputer.com/mgo/26/" rel="nofollow noopener" target="_blank"><img src="https://www.bleepstatic.com/comp/mandiant/mWise-call-for-speakers2.jpg" width="100%" height="auto"></a>
</div>
</div>
<div id="pop_stories">
<div class="cz-line-heading"><div class="cz-line-heading-inner">Popular Stories</div></div>
<ul>
<li>
<a class="pns" href="https://www.bleepingcomputer.com/news/microsoft/microsoft-365-outage-blocks-access-to-web-apps-and-services/">
<div class="bc_pop_story_img)">
<img class="b-lazy" alt="Microsoft 365" src="" data-src="https://www.bleepstatic.com/content/hl-images/2021/10/20/thumb/292x176_Microsoft_365.jpg">
</div>
<p>Microsoft 365 outage blocks access to web apps and services</p>
</a>
</li>
<li>
<a class="pns" href="https://www.bleepingcomputer.com/news/security/attackers-use-abandoned-wordpress-plugin-to-backdoor-websites/">
<div class="bc_pop_story_img)">
<img class="b-lazy" alt="WordPress" src="" data-src="https://www.bleepstatic.com/content/hl-images/2021/02/11/thumb/292x176_WordPress-headpic.jpg">
</div>
<p>Attackers use abandoned WordPress plugin to backdoor websites</p>
</a>
</li>
</ul>
</div>
<div class="s-ou-wrap">
<div align="center" data-freestar-ad="__300x250 __300x600" id="bleepingcomputer_300x250_300x600_160x600_Right_2">
<script data-cfasync="false" type="text/javascript">
    freestar.config.enabled_slots.push({ placementName: "bleepingcomputer_300x250_300x600_160x600_Right_2", slotId: "bleepingcomputer_300x250_300x600_160x600_Right_2" });
</script>
</div>
</div>
<div class="bc_downloads">
<div class="cz-line-heading"><div class="cz-line-heading-inner">Latest Downloads</div></div>
<ul>
<li>
<div class="bc_download_img"><img class="b-lazy" src="" data-src="https://www.bleepstatic.com/download/product-logos/2018/04/09/icon1523304226.png" alt="Malwarebytes Anti-Malware Logo"></div>
<div class="bc_download_text">
<p><a aria-label="Malwarebytes Anti-Malware" href="https://www.bleepingcomputer.com/download/malwarebytes-anti-malware/">Malwarebytes Anti-Malware</a></p>
<span>Version: 4.5.27</span></div>
<div class="bc_download_count"><strong>4M+ <i>Downloads</i></strong></div>
</li>
<li>
<div class="bc_download_img"><img class="b-lazy" src="" data-src="https://www.bleepstatic.com/download/product-logos/2016/08/13/icon1471128781.png" alt="AdwCleaner Logo"></div>
<div class="bc_download_text">
<p><a aria-label="AdwCleaner" href="https://www.bleepingcomputer.com/download/adwcleaner/">AdwCleaner</a></p>
<span>Version: 8.4.0.0</span></div>
<div class="bc_download_count"><strong>56M+ <i>Downloads</i></strong></div>
</li>
<li>
<div class="bc_download_img"><img class="b-lazy" src="" data-src="https://www.bleepstatic.com/download/product-logos/2012/09/19/icon1348083463.jpg" alt="Windows Repair (All In One) Logo"></div>
<div class="bc_download_text">
<p><a aria-label="Windows Repair (All In One)" href="https://www.bleepingcomputer.com/download/windows-repair-all-in-one/">Windows Repair (All In One)</a></p>
<span>Version: 4.13.1</span></div>
<div class="bc_download_count"><strong>2M+ <i>Downloads</i></strong></div>
</li>
<li>
<div class="bc_download_img"><img class="b-lazy" src="" data-src="https://www.bleepstatic.com/download/product-logos/2012/05/24/icon1337884202.gif" alt="Everything Desktop Search Logo"></div>
<div class="bc_download_text">
<p><a aria-label="Everything Desktop Search" href="https://www.bleepingcomputer.com/download/everything-desktop-search/">Everything Desktop Search</a></p>
<span>Version: 1.4.1.1017</span></div>
<div class="bc_download_count"><strong>22,707 <i>Downloads</i></strong></div>
</li>
<li>
<div class="bc_download_img"><img class="b-lazy" src="" data-src="https://www.bleepstatic.com/download/product-logos/2014/09/12/icon1410541566.jpg" alt="Zemana AntiLogger Free Logo"></div>
<div class="bc_download_text">
<p><a aria-label="Zemana AntiLogger Free" href="https://www.bleepingcomputer.com/download/zemana-antilogger-free/">Zemana AntiLogger Free</a></p>
<span>Version: 1.8.2.320</span></div>
<div class="bc_download_count"><strong>53,640 <i>Downloads</i></strong></div>
</li>
</ul>
</div>
<div class="s-ou-wrap" id="pinned">
<div align="center" data-freestar-ad="__300x250 __300x600" id="bleepingcomputer_300x250_300x600_160x600_Right_3">
<script data-cfasync="false" type="text/javascript">
    freestar.config.enabled_slots.push({ placementName: "bleepingcomputer_300x250_300x600_160x600_Right_3", slotId: "bleepingcomputer_300x250_300x600_160x600_Right_3" });
</script>
</div>
</div>
</div>
</div>
</div>
</section>

<section class="cz-boa-wrapp">
<div class="container">
<div class="row">
<div class="col-md-12">
<div align="center" data-freestar-ad="__300x50 __970x250" id="bleepingcomputer_728x90_970x90_970x250_320x50_BTF">
<script data-cfasync="false" type="text/javascript">
    freestar.config.enabled_slots.push({ placementName: "bleepingcomputer_728x90_970x90_970x250_320x50_BTF", slotId: "bleepingcomputer_728x90_970x90_970x250_320x50_BTF" });
</script>
</div>
</div>
</div>
</div>
</section>

<footer id="footer">
<div class="container">
<div class="row">
<div class="col-md-4">
<h5>Follow us:</h5>
<ul class="bc_social_icons">
<li><a href="https://www.facebook.com/BleepingComputer" aria-label="Visit BleepingComputer's Facebook page"><span aria-hidden="true" class="fa-brands fa-facebook-f"></span></a></li>
<li><a href="https://twitter.com/BleepinComputer" aria-label="Visit BleepingComputer's Twitter page"><span aria-hidden="true" class="fa-brands fa-twitter"></span></a></li>
<li><a href="https://infosec.exchange/@BleepingComputer" aria-label="Visit BleepingComputer's Mastodon profile"><span aria-hidden="true" title="BleepingComputer Mastodon profile" class="fa-brands fa-mastodon"></span></a></li>
<li><a href="https://www.youtube.com/user/BleepingComputer" aria-label="Visit BleepingComputer's YouTube page"><span aria-hidden="true" class="fa-brands fa-youtube"></span></a></li>
<li><a href="https://www.bleepingcomputer.com/feed/" aria-label="BleepingComputer's RSS Feeds"><span aria-hidden="true" class="fa fa-rss"></span></a></li>
</ul>
</div>
<div class="col-md-2">
<h5>Main Sections</h5>
<ul>
<li><a href="https://www.bleepingcomputer.com/">News</a></li>
<li><a href="https://www.bleepingcomputer.com/vpn/">VPN Buyer Guides</a></li>
<li><a href="https://www.bleepingcomputer.com/download/">Downloads</a></li>
<li><a href="https://www.bleepingcomputer.com/virus-removal/">Virus Removal Guides</a></li>
<li><a href="https://www.bleepingcomputer.com/tutorials/">Tutorials</a></li>
<li><a href="https://www.bleepingcomputer.com/startups/">Startup Database</a></li>
<li><a href="https://www.bleepingcomputer.com/uninstall/">Uninstall Database</a></li>
<li><a href="https://www.bleepingcomputer.com/glossary/">Glossary</a></li>
</ul>
</div>
<div class="col-md-2">
<h5>Community</h5>
<ul>
<li><a href="https://www.bleepingcomputer.com/forums/">Forums</a></li>
<li><a href="https://www.bleepingcomputer.com/forum-rules/">Forum Rules</a></li>
<li><a href="https://www.bleepingcomputer.com/forums/t/730914/the-bleepingcomputer-official-discord-chat-server-come-join-the-fun/">Chat</a></li>
</ul>
</div>
<div class="col-md-2">
<h5>Useful Resources</h5>
<ul>
<li><a href="https://www.bleepingcomputer.com/welcome-guide/">Welcome Guide</a></li>
<li><a href="https://www.bleepingcomputer.com/sitemap/">Sitemap</a></li>
</ul>
</div>
<div class="col-md-2">
<h5>Company</h5>
<ul>
<li><a href="https://www.bleepingcomputer.com/about/">About BleepingComputer</a></li>
<li><a href="https://www.bleepingcomputer.com/contact/">Contact Us</a></li>
<li><a href="https://www.bleepingcomputer.com/news-tip/">Send us a Tip!</a></li>
<li><a href="https://www.bleepingcomputer.com/advertise/">Advertising</a></li>
<li><a href="https://www.bleepingcomputer.com/write-for-bleepingcomputer/">Write for BleepingComputer</a></li>
<li><a href="https://www.bleepingcomputer.com/rss-feeds/">Social & Feeds</a></li>
<li><a href="https://www.bleepingcomputer.com/changelog/">Changelog</a></li>
</ul>
</div>
</div>
</div>
<div class="bc_footer_bottom">
<div class="container">
<div class="row">
<div class="col-md-6">
<p><a href="https://www.bleepingcomputer.com/terms-of-use/">Terms of Use</a> - <a href="https://www.bleepingcomputer.com/privacy/"> Privacy Policy</a> - <a href="https://www.bleepingcomputer.com/ethics-statement/">Ethics Statement</a> - <a href="https://www.bleepingcomputer.com/affiliate-disclosure/">Affiliate Disclosure</a></p>
 </div>
<div class="col-md-6 bc_copyright">
<p>Copyright @ 2003 - 2023 <a href="https://www.bleepingcomputer.com/"> Bleeping Computer<sup>&reg;</sup> LLC </a> - All Rights Reserved</p>
</div>
</div>
</div>
</div>
</footer>
</div>


<div class="bc_goto_top">
<a href="#" title="Back to Top"><i aria-hidden="true" class="fa fa-chevron-up"></i></a>
</div>


<div class="bc_popup" aria-modal="true" aria-label="Login form">
<div class="bc_login_form">
<a class="bc_popup_close" href="javascript:;" aria-label="Close login form" title="Close"></a>
<h4>Login</h4>
<form action="https://www.bleepingcomputer.com/forums/index.php?app=core&amp;module=global&amp;section=login&amp;do=process&amp;return=https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/" method="post">
<div class="bc_form_feild">
<label for="ips_username">Username</label>
<input aria-label="Enter login name" title="Enter login name" type="text" id="ips_username" name="ips_username" spellcheck="false" autocomplete="username">
</div>
<div class="bc_form_feild">
<label for="ips_password">Password</label>
<input aria-label="Enter login password" title="Enter login passwod" type="password" id="ips_password" name="ips_password" spellcheck="false" autocomplete="current-password">
</div>
<div class="bc_form_feild">
<div class="bc_remember">
<input id="remember" type="checkbox" name="rememberMe" value="1" checked="checked">
<label for="remember">Remember Me</label>
</div>
<div class="bc_anon">
<input id="anonymous" type="checkbox" name="anonymous" value="1">
<label for="anonymous">Sign in anonymously</label>
</div>
</div>
<div class="bc_btn_wrap">
<input type='hidden' name='auth_key' value='880ea6a14ea49e853634fbdc5015a024' />
<input type="submit" aria-label="Login to site" title="Login" value="Login" class="bc_sub_btn">
<a aria-label="Sign in with Twitter" href="https://www.bleepingcomputer.com/forums/index.php?app=core&amp;module=global&amp;section=login&amp;serviceClick=twitter&amp;return=https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/" class="bc_twitter_btn"><img src="https://www.bleepstatic.com/images/site/login/twitter.png" width="28" height="24" alt="Sign in with Twitter button"> Sign in with Twitter</a>
<hr />
<p>Not a member yet? <a aria-label="Register account" title="Register account" href="https://www.bleepingcomputer.com/forums/index.php?app=core&module=global&section=register">Register Now</a></p>
</div>
</form>
</div>
</div>


<script async type="text/javascript" src="https://www.bleepstatic.com/js/redesign/bootstrap/js/bootstrap.js"></script>
<script src="https://www.bleepstatic.com/js/blazy/blazy.min.js"></script>
<script type="text/javascript" async src="https://www.bleepstatic.com/js/redesign/bleep.js"></script>
<script type="text/javascript" async defer src="https://www.bleepstatic.com/js/redesign/fancybox/jquery.fancybox.js"></script>
<script type="text/jscript">
$(document).ready(function(e) {
    $('.articleBody img').not('a>img').not('.contrib_but>img').click(function(e) {
        e.preventDefault();
                 $.fancybox({'href' : $(this).attr('src')});
    });
});
</script>
<script src="//www.bleepstatic.com/js/fixto/fixto.min.js"></script>
<script type="text/javascript">
$(document).ready(function(){

var content = $('.cz-main-left-section');
var sidebar = $('.bc_right_sidebar');
var count = 0;
var myTimer;

function setEqualContainer() {
        var getContentHeight = content.outerHeight();
        var getSidebarHeight = sidebar.outerHeight();

        if ( getContentHeight > getSidebarHeight ) {
                sidebar.css('min-height', getContentHeight);
        }

        if ( getSidebarHeight > getContentHeight ) {
                content.css('min-height', getSidebarHeight);
        }
}

// creating the timer which will run every 500 milliseconds
// and will stop after the container will be loaded
// ...or after 15 seconds to not eat a lot of memory

myTimer = setInterval( function() {
        count++;

        if ( $('.testContainer').length == 0 ) {
                setEqualContainer();
        } else {
                setEqualContainer();
                clearInterval(myTimer);
        }

        if ( count == 15) {
                clearInterval(myTimer);
        }
}, 500);

        $('#pinned').fixTo('.bc_right_sidebar', {
                 bottom: 25,
        });

        $('#more_dd').click(function (e) {
          e.preventDefault()
        });

        $('.bc_goto_top a').click(function(){
        $("html, body").animate({ scrollTop: 0 }, 600);
        return false;
        });
        jQuery('.bc_login_btn').on('click', function() {
    jQuery('.bc_popup').fadeIn("slow");
  });
        jQuery('.bc_popup_close').on('click', function() {
    jQuery('.bc_popup').fadeOut("slow");
  });

});
</script>
<script type="text/javascript">
// validate comment box not empty
function validate_comment_box_not_empty()
{
	$('#frm_comment_box').submit(function(e) {
		if($('#comment_html_box').val().length==0)
		{
			alert("Please enter a comment before pressing submit");
			return false;
		}
		else
		{
			return true;
		}
	});
}

function cz_strip_tags(input, allowed) {
  allowed = (((allowed || '') + '')
    .toLowerCase()
    .match(/<[a-z][a-z0-9]*>/g) || [])
    .join(''); // making sure the allowed arg is a string containing only tags in lowercase (<a><b><c>)
  var tags = /<\/?([a-z][a-z0-9]*)\b[^>]*>/gi,
    commentsAndPhpTags = /<!--[\s\S]*?-->|<\?(?:php)?[\s\S]*?\?>/gi;
  return input.replace(commentsAndPhpTags, '')
    .replace(tags, function($0, $1) {
      return allowed.indexOf('<' + $1.toLowerCase() + '>') > -1 ? $0 : '';
    });
}
function cz_br2nl(str) {
	var regex = /<br\s*[\/]?>/gi;
    //var pure_str = str.replace(regex,"\n");
    var pure_str = str.replace(regex,"");
    return cz_strip_tags(pure_str,'');
}
$(document).ready(function(e) {
// validate comment box not empty
validate_comment_box_not_empty();

// report comment
$('#comment-report-other-reason-wrap').css('display','none');
$('.cz-popup-close').click(function(e) {
    e.preventDefault();
        $('.cz-popup').fadeOut("slow");
});
$('.cz-comment-report-btn').click(function(e) {
    e.preventDefault();
        $('.cz-popup').css('height',$( document ).height()+'px');
    //var comment_box_report_top = $(this).offset().top;
        var comment_box_report_top = $(document).scrollTop();
        $('.cz-popup-wrapp').css('top',(comment_box_report_top+100)+'px');
        $('#comment-id-report').val($(this).attr('data-id'));
        $('.cz-popup').fadeIn("slow");
});
$("input[type='radio'][name='comment-report-reason']").click(function(e) {
    if($(this).val()=='Other')
        {
                $('#comment-report-other-reason-wrap').css('display','block');
        }
        else
        {
                $('#comment-report-other-reason-wrap').css('display','none');
        }
});
$('.comment-report-submit-btn').click(function(e) {
    e.preventDefault();
        var comment_report_reason = "";
        var comment_report_reason = $("input[type='radio'][name='comment-report-reason']:checked").val();
        if (comment_report_reason=='Other') {
                comment_report_reason = $('#comment-report-other-reason').val();
        }
        if(comment_report_reason=='') {
                alert('Please specify reason');
        }
        else
        {
                $('.cz-popup-report-submiting').css('display','inline-block');
                $.ajax({
                
                 type: "POST",
                 url: 'https://www.bleepingcomputer.com/report-comment/',
                 data: { comment_id: $('#comment-id-report').val(), reason: comment_report_reason },
                 success: function(data) {
                          $('.cz-popup-report-submiting').css('display','none');
                          $('.cz-popup').fadeOut("slow");
                 }
                
                });
        }
});
// report comment

    $('.cz_comment_reply_btn').click(function(e) {
        e.preventDefault();
  $('#parent_comment_id').val($(this).attr('data-id'));
  $('#comment_html_box').attr('placeholder','Replying to '+$(this).attr('data-name'));
  var comment_box_top = $('.cz-post-comment-wrapp').offset().top;
  $("html, body").animate({ scrollTop: comment_box_top-100 }, 600);
  $('#comment_html_box').focus();
    });
    $('.cz_comment_quote_btn').click(function(e) {
        e.preventDefault();
        var quote_comment_html ='';
        if($(this).attr('data-id')!=undefined && $(this).attr('data-id')!='')
        {
  $('#parent_comment_id').val($(this).attr('data-id'));
  quote_comment_html = $('#comment_html_'+$(this).attr('data-id')).html();
  }
  quote_comment_html = cz_br2nl(quote_comment_html);
  $('#comment_html_box').val('"'+quote_comment_html+'"\n\n');
  var comment_box_top = $('.cz-post-comment-wrapp').offset().top;
  $("html, body").animate({ scrollTop: comment_box_top-100 }, 600);
  $('#comment_html_box').focus();
    });
 
});

function editForm(cid)
{

   $.ajax({

     type: "GET",
     url: window.location.href+"?sa=1",
     data: { f: "e", cid: cid },
     success: function(data) {
          $('.cz-post-comment-wrapp').html(data);
		  validate_comment_box_not_empty();
     }

   });

   var comment_box_top = $('.cz-post-comment-wrapp').offset().top;
   $("html, body").animate({ scrollTop: comment_box_top-100 }, 600);

}

$(document).on('click', '.cz-subscribe-button' , function(e) {
    e.preventDefault();
                
    $.ajax({
              
    	type: "POST",
        url: window.location.href,
        data: { a: 'sub' },
        success: function(data) {
        if(data == '1')
        	$( "li.cz-subscribe-button" ).replaceWith( '<li aria-label="Unsubscribe from comments" title="Unsubscribe from comments" class="cz-unsubscribe-button"><a href="#"></a></li>');
        }
                
    });
});

$(document).on('click', '.cz-unsubscribe-button' , function(e) {
    e.preventDefault();
                
    $.ajax({
               
         type: "POST",
       	 url: window.location.href,
         data: { a: 'unsub' },
         success: function(data) {
    	 if(data == '1')
         	$( "li.cz-unsubscribe-button" ).replaceWith( '<li aria-label="Subscribe to comments" title="Subscribe to comments" class="cz-subscribe-button"><a href="#"></a></li>');
         }
               
    });

});
</script>
<script type="text/javascript">
$('.cz-print-icon, .cz-lg-print-icon').click(function(e) {
    e.preventDefault();
    var divToPrint = document.getElementById('.article_section'); 
    var mywindow = window.open('','','left=0,top=0,width=950,height=600,toolbar=0,scrollbars=0,status=0,addressbar=0');

    var is_chrome = Boolean(mywindow.chrome);
    mywindow.document.write($( ".article_section" ).html());
    mywindow.document.close(); // necessary for IE >= 10 and necessary before onload for chrome

    if (is_chrome) {
        mywindow.onload = function() { // wait until all resources loaded 
            mywindow.focus(); // necessary for IE >= 10
            mywindow.print();  // change window to mywindow
            mywindow.close();// change window to mywindow
        };
    }
    else {
        mywindow.document.close(); // necessary for IE >= 10
        mywindow.focus(); // necessary for IE >= 10
        mywindow.print();
        mywindow.close();
    }

    return true;
});
</script>
<script type="text/javascript">

var loginhash = '880ea6a14ea49e853634fbdc5015a024';
var main_nav_hide_flag = true;
var scrollTop =0;
var main_nav_hide_timer = '';

function call_main_nav_hide()
{
 if(main_nav_hide_flag && scrollTop >=100)
 {
  $('header').addClass("nav-up");
 }
}
var cz_header_pos = $('header').offset().top;
$(window).scroll(function() {
	$('header').each(function(){
	var cz_top_of_window = $(window).scrollTop()-100;
		if (cz_top_of_window > cz_header_pos) {			
			$('.bc_goto_top').fadeIn("slow");
		} else {
			$('.bc_goto_top').fadeOut("slow");			
		}
	});

});
var prevScrollTop = 0;
$(window).scroll(function(event){
    scrollTop = $(this).scrollTop();

    if ( scrollTop < 0 ) {
        scrollTop = 0;
    }
    if ( scrollTop > $('body').height() - $(window).height() ) {
        scrollTop = $('body').height() - $(window).height();
    }

    if (scrollTop >= prevScrollTop && scrollTop) {
        $('header').addClass("nav-up");
    } else {
	if (scrollTop >=100)
	{
	 $('header').removeClass("nav-up"); 
	 main_nav_hide_timer = setTimeout("call_main_nav_hide()",5000);
	}
	else
	{
	 $('header').removeClass("nav-up");
	 clearInterval(main_nav_hide_timer);
	}
    }

    prevScrollTop = scrollTop;
});
$(document).ready(function(){	
 var bLazy = new Blazy();

 $(".bc_dropdown a").mouseenter(function(e) {
  $(this).parent('.bc_dropdown').delay(250).queue(function(){
      $(this).addClass('show_menu').dequeue();
       bLazy.revalidate();
  });
  main_nav_hide_flag = false;
 });
 $(".bc_dropdown").mouseleave(function(e) {
  $(".bc_dropdown").clearQueue().stop().removeClass('show_menu');
  main_nav_hide_flag = true;
  if (scrollTop >=100)
  {
   main_nav_hide_timer = setTimeout("call_main_nav_hide()",5000);
  }
 });
 $('.bc_dropdown a').each(function(){
         if($(this).is(":hover"))
         {
                 $(this).mouseenter();
         }
 });
$('#bc_drop_tab a').hover(function (e) {
  e.preventDefault()
  $(this).tab('show')
  bLazy.revalidate();
});

	$('#more_dd').click(function (e) {
	  e.preventDefault()
	});

	$('.bc_goto_top a').click(function(){
	$("html, body").animate({ scrollTop: 0 }, 600);
	return false;
	});
	jQuery('.bc_login_btn').on('click', function() { 
	    jQuery('.bc_popup').fadeIn("slow");
	    $('#ips_username').focus();
        });
	jQuery('.bc_popup_close').on('click', function() {
    jQuery('.bc_popup').fadeOut("slow");
  });
  

});

$(document).mouseup(function (e)
{
    var container = $(".bc_login_form");

    if (!container.is(e.target) // if the target of the click isn't the container...
        && container.has(e.target).length === 0 && $('.bc_popup').css('display') =='block') // ... nor a descendant of the container
    {
        jQuery('.bc_popup').fadeOut("slow");
    }
});
if($(window).width() < 767)
{ 
	$(".nav-menu").on('click','li', function(){
	$(this).toggleClass('active').siblings().removeClass('active');

 })
}
</script>
<section class="cz-popup">
<div class="cz-popup-wrapp">
<a class="cz-popup-close" href="javascript:;" title="Close"> <i aria-hidden="true" title="Times reported" class="fa fa-times"></i> </a>
<h4>Reporter</h4>
<div class="cz-popup-inner-wrapp">
<h6>Help us understand the problem. What is going on with this comment?</h6>
<form>
<input type="hidden" id="comment-id-report" value="0">
<ul>
<li>
<label><input type="radio" name="comment-report-reason" value="Spam">Spam</label>
</li>
<li>
<label><input type="radio" name="comment-report-reason" value="Abusive or Harmful">Abusive or Harmful</label>
</li>
<li>
<label><input type="radio" name="comment-report-reason" value="Inappropriate content">Inappropriate content</label>
</li>
<li>
<label><input type="radio" name="comment-report-reason" value="Strong language">Strong language</label>
</li>
<li>
<label><input type="radio" name="comment-report-reason" value="Other">Other</label>
</li>
<li id="comment-report-other-reason-wrap" style="display:none;">
<textarea aria-label="Enter other reason for reporting the comment" rows="2" cols="2" id="comment-report-other-reason"></textarea>
</li>
</ul>
<p>Read our <a href="https://www.bleepingcomputer.com/posting-guidelines/">posting guidelinese</a> to learn what content is prohibited.</p>
</form>
</div>
<div class="cz-popup-bottom-wrapp">
<div class="cz-popup-report-submiting" style="display:none;">Submitting...</div>
<a href="#" title="Submit" class="cz-next-btn comment-report-submit-btn">SUBMIT</a>
</div>
</div>
</section>
<noscript id="deferred-styles">
        
<link rel="stylesheet" href="https://www.bleepstatic.com/js/redesign/fancybox/jquery.fancybox.css" type="text/css" media="screen" />
        <link href="https://www.bleepstatic.com/redesign/fontawesome6/css/fontawesome.min.css" rel="stylesheet" type="text/css" media="all">
        <link href="https://www.bleepstatic.com/redesign/fontawesome6/css/brands.min.css" rel="stylesheet" type="text/css" media="all">
        <link href="https://www.bleepstatic.com/redesign/fontawesome6/css/solid.min.css" rel="stylesheet" type="text/css" media="all">
    </noscript>
<script>
      var loadDeferredStyles = function() {
        var addStylesNode = document.getElementById("deferred-styles");
        var replacement = document.createElement("div");
        replacement.innerHTML = addStylesNode.textContent;
        document.body.appendChild(replacement)
        addStylesNode.parentElement.removeChild(addStylesNode);
      };
      var raf = requestAnimationFrame || mozRequestAnimationFrame ||
          webkitRequestAnimationFrame || msRequestAnimationFrame;
      if (raf) raf(function() { window.setTimeout(loadDeferredStyles, 0); });
      else window.addEventListener('load', loadDeferredStyles);
    </script>
<script type="text/javascript" async src="//s9.addthis.com/js/300/addthis_widget.js#pubid=ra-561517d2c7f964d6&domready=1"></script>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816" integrity="sha512-jGCTpDpBAYDGNYR5ztKt4BQPGef1P0giN6ZGVUi835kFF88FOmmn8jBQWNgrNd8g/Yu421NdgWhwQoaOPFflDw==" data-cf-beacon='{"rayId":"7bbfd12fed2823c4","token":"20bbc1a5db504592b44ff5662b975c56","version":"2023.3.0","si":100}' crossorigin="anonymous"></script>
</body>
</html>